Endecryptor preventing side channel attack, driving method thereof and control device having the same

Abstract

An endecryptor and a control device are provided. The endecryptor includes a first SBOX configured to replace first input data with first substitution data, a transformation unit configured to replace the first input data with second substitution data and an output terminal configured to output encrypted or decrypted output data based on the first and second substitution data.

What is claimed is: 
     
         1 . An endecryptor comprising:
 a first SBOX configured to replace first input data with first substitution data;   a transformation unit configured to replace the first input data with second substitution data; and   an output terminal configured to output encrypted or decrypted output data based on the first and second substitution data.   
     
     
         2 . The endecryptor of  claim 1 , wherein the transformation unit outputs a dummy bit which adjusts hamming weight of the output data as part of the second substitution data. 
     
     
         3 . The endecryptor of  claim 1 , further comprising:
 a logic unit configured to perform a logic operation on the first substitution data and the second substitution data to generate combined substitution data;   wherein the output terminal generates the output data based on the combined substitution data.   
     
     
         4 . The endecryptor of  claim 1 , wherein the transformation unit comprises a second SBOX to replace the first input data with the second substitution data. 
     
     
         5 . The endecryptor of  claim 4 , wherein the first SBOX and the second SBOX have a different configuration. 
     
     
         6 . The endecryptor of  claim 4 , wherein a number of the first input data is N,
 a number of each of the first substitution data and the second substitution data is M,   the first SBOX is configured to replace one of the N number of the first input data with one of the M number of the first substitution data,   the second SBOX is configured to replace one of the N number of the second input data with one of the M number of the second substitution data, and   N is a natural number greater than M.   
     
     
         7 . The endecryptor of  claim 4 , wherein at least one of the first SBOX and the second SBOX receives the first input data and generates a dummy bit. 
     
     
         8 . The endecryptor of  claim 4 , further comprising:
 an input terminal configured to transmit the first input data to the first SBOX and the second SBOX,   wherein the input terminal comprises pre-charge logic.   
     
     
         9 . The endecryptor of  claim 4 , wherein the first SBOX comprises a first look-up table, the second SBOX comprises a second look-up table, and the first look-up table and the second look-up table are different from each other. 
     
     
         10 . The endecryptor of  claim 4 , further comprising:
 a third SBOX configured to replace second input data with third substitution data; and   a fourth SBOX configured to replace the second input data with fourth substitution data;   wherein the output terminal configured to output encrypted or decrypted output data based on the first to fourth substitution data and a configuration of each of the first to fourth SBOXs is different from each other.   
     
     
         11 . The endecryptor of  claim 4 , wherein the endecryptor replaces the first substitution data and the second substitution data with cipher data according to a block encryption algorithm. 
     
     
         12 . A control device comprising:
 an endecryptor configured to replace a plain text with cipher data according to a block encryption algorithm or replace the cipher data with the plain text; and   a processor configured to process the plain text,   wherein the endecryptor comprises:   a first SBOX configured to replace first input data with first substitution data;   a transformation unit configured to replace the first input data with second substitution data; and   an output terminal configured to output encrypted or decrypted output data based on the first and second substitution data.   
     
     
         13 . The control device of  claim 12 , wherein the transformation unit outputs a dummy bit which adjusts hamming weight of the output data as part of the second substitution data. 
     
     
         14 . The control device of  claim 12 , wherein the output terminal generates the output data by performing a logic operation with respect to the first and second substitution data. 
     
     
         15 . The control device of  claim 12 , wherein the number of the first input data is N,
 the number of each of the first substitution data and the second substitution data is M,   the first SBOX replaces one of the N number of the first input data with one of the M number of the first substitution data, and   N is a natural number greater than M.   
     
     
         16 . An endecryptor comprising:
 a transformation unit configured to replace input data with substitution data; and   an output terminal configured to output encrypted or decrypted output data based on the substitution data;   wherein the substitution data comprises a dummy bit to set a hamming weight of the output data.   
     
     
         17 . The endecryptor of  claim 16 , wherein the transformation unit comprises a first SBOX and a second SBOX, the first SBOX being configured to replace the input data with first substitution data and the second SBOX being configured to replace the input data with second substitution data;
 wherein the output terminal is configured to output the encrypted or the decrypted output data based on the first substitution data and the second substitution data.   
     
     
         18 . The endecryptor of  claim 17 , further comprising:
 a logic unit configured to perform a logic operation on the first substitution data and the second substitution data to generate combined substitution data;   wherein the output terminal is configured to output the encrypted or the decrypted output data based on the combined substitution data.   
     
     
         19 . The endecryptor of  claim 17 , wherein a number of the input data is N and a number of each of the first substitution data and the second substitution data is M;
 the first SBOX is configured to replace one of the N number of the first input data with one of the M number of the first substitution data;   the second SBOX is configured to replace one of the N number of the second input data with one of the M number of the second substitution data; and   N is a natural number greater than M.   
     
     
         20 . The endecryptor of  claim 16 , further comprising:
 an input terminal configured to transmit the input data to the transformation unit;   wherein the input terminal comprises pre-charge logic.